Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File:                     90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier:          dWNbBQSQYBi0h91siSLVwoXOkIZeyExokguXi2YuWlM=
Subject key identifier:   B8:64:1F:58:97:88:C1:98:F0:F8:16:BA:C2:43:E9:7E:5C:42:EE:1D
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer:       /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial:       01974E8E651C82A2BC72ED8043E8A8048DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number:          150F
Signing time:             Sun 08 Jun 2025 08:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:44 +0000
Files and hashes:         1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: wbk967DMkdakYAeaBJGXuskwB8ZOMt65quWepuvl8qI=)
                          2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:65:1c:82:a2:bc:72:ed:80:43:e8:a8:04:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
        Validity
            Not Before: Jun  8 08:00:44 2025 GMT
            Not After : Jun  9 08:00:44 2025 GMT
        Subject: CN=b8641f589788c198f0f816bac243e97e5c42ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:3d:95:c9:5d:ce:52:ca:f0:a6:d1:34:15:
                    3e:68:45:66:89:1b:51:84:cf:8e:ef:c9:30:80:f8:
                    ac:ab:49:4f:1e:23:f0:2f:76:0f:d2:20:96:9e:c3:
                    5e:2c:09:5e:2b:7a:39:3f:43:84:12:41:24:54:d1:
                    f7:c9:b1:53:66:8e:61:ac:1a:ec:f9:7b:0a:c0:6b:
                    25:a6:1d:c4:c2:9e:d7:91:4e:05:a5:08:48:60:bb:
                    2e:a5:23:0d:98:99:18:43:00:cf:ce:56:4e:97:63:
                    9c:60:39:91:1f:76:68:a3:4c:97:41:12:6a:1a:b7:
                    07:47:19:9d:7a:69:5f:65:22:9d:cb:5e:d5:5a:a0:
                    5f:92:af:8d:fc:b3:a1:3b:19:53:b7:10:b0:8b:e4:
                    f8:16:17:90:68:02:d0:16:c0:ae:ba:0f:ab:16:9e:
                    0a:d3:7c:49:04:18:bc:ff:75:0c:2c:61:9c:36:fa:
                    42:2c:7f:99:c0:cb:a6:97:61:21:25:46:63:37:3f:
                    b7:4a:f9:da:f0:8e:59:94:cd:70:60:bb:64:59:75:
                    fd:03:4b:c1:5e:4a:d6:78:02:40:26:6a:e9:7d:ef:
                    e5:7a:3a:6e:68:78:9a:1f:8b:6b:5e:15:32:16:20:
                    2b:88:a1:f3:b8:24:48:fd:57:a1:7e:90:ef:7d:9a:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:1F:58:97:88:C1:98:F0:F8:16:BA:C2:43:E9:7E:5C:42:EE:1D
            X509v3 Authority Key Identifier:
                keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:a1:74:48:62:6b:28:8e:94:5d:be:26:4a:97:ed:bd:14:
         2d:9a:eb:bd:63:c1:83:d1:3e:b1:f1:c9:a1:24:1b:37:6f:44:
         3d:f2:4d:2d:a8:e6:ab:f8:75:05:7e:cc:80:c7:c9:58:88:70:
         9b:b4:a6:c5:c4:96:81:c3:bc:3b:e1:56:47:a1:dd:fc:28:2c:
         1a:d7:37:ab:e1:cd:a0:4a:8f:8b:95:66:28:8a:e2:36:04:55:
         f4:f3:c4:ed:92:09:b3:83:4a:fd:8f:e5:16:9c:2c:eb:46:92:
         bf:f7:cd:82:ea:a7:ce:24:5f:b3:08:20:85:f9:45:5a:4f:6f:
         22:73:6c:a4:3b:23:3b:24:e0:f0:e0:cb:85:3b:35:f3:c0:fc:
         93:6f:e7:6c:78:a4:d0:38:48:9d:f6:fc:ae:d6:8e:39:04:37:
         9f:56:01:ed:e3:de:0f:68:ee:69:2a:cb:4b:10:4e:74:ac:47:
         0f:0e:80:eb:4e:66:ba:0c:19:02:1c:6f:79:eb:d6:25:21:9f:
         4c:c2:c6:20:0c:9b:e9:69:83:88:3b:ba:de:9c:c9:1d:bb:98:
         5e:65:59:7c:93:70:74:1f:eb:06:83:9a:fd:38:eb:61:c3:c7:
         60:88:63:79:f2:67:f8:61:94:d4:85:74:a5:b5:38:11:24:8a:
         f9:e1:6c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:20 2025 by rpki-client